OpenClaw and OpenCode are open source projects with zero warranty and nobody to sue if they have a npm Trojan in them
When has any technology company been sued for pushing accidental malware in their updates?
The reality is that you have never had anyone to sue.
The risk with OpenClaw et al isn't that the software itself is compromised. The risk is that what it does is fundamentally insecure and Claude Code isn't any better
Once again, despite everyone's protestations about not anthropomorphising things, LLMs are, to first approximation, best seen as little people on a chip. So with that in mind, it should be obvious why enterprise would prefer dealing with Anthropic's official products than OpenClaw - it's similar to contracting a team of software engineers from another well-known corporation and giving them keys to the castle, vs. inviting in any randos that show up at the door on any given day and can pass FizzBuzz test. Even if, in both cases, these turned out to be the same people, having an organizational/legal-level relationship changes the expectations and trust levels involved.
Anthropic wants you to use their subscription only for Anthropic products.
I don’t think the difference is that difficult to see.